Splunk Search

How to chance color of the row based on field name

saravana22
Explorer

Hi experts,

i have below table.. how do i change background colour of the row where error Categories = Total_error_rate

Error_categories                       Percentage%
error_rate_Error                        0.1138498
error_rate_Warning                 0.0011737
error_rate_Critical                   0.0000000
error_rate_HTTP                       6.5950704
Total_error_rate                        6.7100939

 

Thank you 🙂

Labels (1)
0 Karma

somesoni2
Revered Legend
0 Karma

saravana22
Explorer

its not worked for me...  i want color the entire row where field value = Total_error_rate

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

The technique @somesoni2  pointed you too works for the entire row assuming you have listed your fields correctly on the foreach command (although you could use * to get them all too). A wrinkle might be that you may need to put the <<FIELD>> in quotes (double for left of assignments and single for right of assignments) if your field names are other than simple words. Please can you post what you have done which is not working for you?

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...